grsecurity-1.9.7c-2.4.19.patch load increase

[maynard]

Just upgraded from grsecurity 1.97 to 1.97c, but i it seems like my load usage increased after the upgrade. Am i going insane or has the new changes some effect on my load average. I use mrtg to plot the load usage and is has clearly gone up after the upgrade and i haven't changed anything else :)

Regards
Maynard

[PaX Team]

Just upgraded from grsecurity 1.97 to 1.97c, but it seems like my load usage increased after the upgrade. Am i going insane or has the new changes some effect on my load average.

could you please disable SEGMEXEC (if you had it enabled at all of course) and see if the load changes back? also, can you give us some numbers on the load change?

[maynard]

sorry for the late reply but wanted to be sure that it actually was grsec 1.9.7c that was causing the problem. Have been trying different kernel's the last 24 hours, and came to the conclusion that it is grsecurity1.9.7c that is causing the load increase. But when running 1.9.7c and disabling SEGMEXEC seem to fix things.
The load increase isn't that much of a problem like a 0.10 increase but i just seemed it was odd. Please supply me with a email if you wish to have further details. Like a link to my stats page where it is actually possible to see what version of grsec is running by looking at the stats graph :)

Regards

Maynard

[PaX Team]

But when running 1.9.7c and disabling SEGMEXEC seem to fix things.
The load increase isn't that much of a problem like a 0.10 increase but i just seemed it was odd.

hmm, well, it depends... the only change that would affect performance is the GDT switching code in the i386 context switch call. one would think a few more cycles don't make a difference, but as they do, i'll try to find a better implementation.

Please supply me with a email if you wish to have further details. Like a link to my stats page where it is actually possible to see what version of grsec is running by looking at the stats graph :)

pageexec at freemail.hu (it's on our web site as well btw ;-).